Description :

- Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices

- Develop and maintain security testing plans for internal environments and vendors

- Automate penetration and other security testing on networks, systems and applications

- Develop meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk

- Produce actionable, threat-based, reports on security testing results

- Conduct security audits and legal cyberattack simulations & purple team exercises

- Modify open source tools for usage

- Provide recommendations based on an assessment of hardware and software systems

- Validate bug bounty requests

- Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and discuss remediation

- Communicate security issues to a wide variety of internal and external customers to include technical teams, executives, risk groups, vendors, and regulators

- Implement solutions to enhance data security

- Other systems security tasks as defined by Management.

Qualifications :

- Previous working experience as a Penetration Tester for 3 years

- In-depth knowledge of application development processes and at least one programing or scripting language (e.g., Java, Rust, Go, C, C#, Ruby, Python, PowerShell)

- Hands on experience with testing frameworks such as the PTES and OWASP

- Applicable knowledge of Windows client/server, Unix/Linux systems, Mac OS X, and cloud infrastructure such as AWS (Must), Azure, or Google Cloud

- Critical thinker and problem solver

- Excellent organizational and time management skills

- Excellent documentation skills

Preferred Certifications : (Any one)

- TCM Security PNPT or equivalent

- eLearnSecurity eCPPT or equivalent

- eLearnSecurity eJPT or equivalent

- AWS Security Speciality or equivalent